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m THE CLAIMS; 

I 

1 . (Previously presented) A coirxputer-implemented method of generating a security object for use 
in authenticating a user to access an item, comprising computer-iinpleTnented steps of: 

receiving security object data; 

setting one or more attributes associated with the security object data, wherein the on© or more 
attributes include a user designation of a security object type; and 

encapsulating, within the security object, the security object data and the one or more attributes 
with one or more methods, wherein the security object is used to authenticate the user by validating an 
identity of the user using at least one of the one or more tnethods encapsulated within the security object 

2 . (Previously presented) The computer-implemented method of claim 1 , further comprising 
obtaining the one or more methods from a security object class. 

3. (Previously presented) The conq>uter-implementcd method of claim 1, wherein the one or more 
methods operate on the security object data and one or more attributes, 

4. (Previously presented) The computer-implemented method of claim 1 » wherein the one or more 
methods operate on the security object data and input data provided by the user and passed to the security 
object to authenticate the user to access the item. 

5. (Previously presented) The coniputer-iinplemented method of claim 1, wherein the security 
object data is one of textual data, audio data, graphical data, and biometric data« 

6. (Previously presented) The contputer-implemented method of claim 1 , wherein the security 

object type is one of a single use security object, a group security object, a timed security object, a 

concurrent multi-user security object, a security object throttle, a translated password security object, a 

security object augmented by a at least one of a CPU identifieTy a CPU speed and a system configuratioiiy 

a Wave file or MP3 security object, an image file security object, a security object augmented by a 

location of the user, a security object augmented by a current window and/or pointer position, a security 

object augmented by an IP address, a security object augmented by a screen background characteristic, a 

security object augmented by a personal identification number one of a speed of a card swipe and a 

number of times of a card swipe, a security object augmented by a mobile telephorie ring or mobile 

telephone identification number, a security object augmented by a caller identification of the user, and a 

security object augmented by an environmental condition. 
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7 . (Previously presented) The Qomputer-implemented method of claim 1 , further comprising: 
providing the security object to a security system, wherein the security system is a hardware data 

processing system that stores the security object and associates the security ohject with a user 
identification so that the security object may be retrieved when the user eaters their identification in order 
to gain access to the item. 

8. (Previously presented) The computer-inclement ed method of claim 7, wherein the security 
system invokes the security object in response to a request for access to the item by the user, 

9. (Previously presented) The computer-implemented method of claim 1 , storing the security object 
data on an electronic medium in a device with data transmission capability* 

10. (Previously presented) The computer-implemented method of claim 9, wherein the device is a 
portable device. 

1 1 . (Previously presented) The computer-implemented method of claim 9, wherein the portable 
device is one of a keychain, a portable MP3 player, a mobile telephone, a pager» an electronic wrist 
watch, a remote control, a garage door transmitter, a keyless entry device for a vehicle, a smartcoid, and a 
magnetic stripe card. 

1 2. (Previously presented) The coniputer-implemented method of claim 7» wherein the security 
object contains a partial set of methods and wherein the security system contaiiffi a complementary set of 
methods, 

1 3. (Previously presented) The cornputer-iraplemented method of claim 1, wherein the security 
object requires hardwEure assistance for authentication of input data passed to the security object. 

1 4. (Previously presented) The computer-implemented method of claim 1 , wherein the security 
object data is received &om a client apparatus, 

1 5. (Previously presented) The computer-implemented method of claim 1, wherein the security 
object data is received ftom a user via a \iser interface. 
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1 6. (Previously presented) The computer-implemented method of claim 1 5, wherein the user 
interface is a security object foundry application resident on a computing device. 

17. (Previously presented) The computer-intplemented method of claim 15, wherein the user 
interface ia an interface transmitted from a server apparatus to a client apparatus. 

18, (Previously presented) A computer program product in a computer readable medium for 
generating a security object for use in authenticating a user to access an item, coniprising: 

first instructions for receiving security object data; 

second instructions for setting one or more attributes associated with the security object data, 
wherein the one or more attributes inchide a user designation of a security object type; and 

third instructions for encapsulatingj within the security object, the security object data and the one 
or more attributes with one or more methods, wherein the security object is used to authenticate the user 
by validating an identity of the user using ax least one of the one or more methods encapsulated within the 
security object. 

19. (Original) The computer program product of claim 1 8, fourth instructions for obtainfaig the one 
or more methods from a security object cla&s. 

20, (Original) The computer program product of claim 18, wherein the one or more methods operate 
on the security object data and one or more attributes. 

21 , (Previously presented) The computer program product of claim 1 8, wherein the one or more 
methods operate on the security object data and input data provided by the user and passed to the security 
object to authenticate the user to access the item. 

21. (Original) The computer program product of claim 18, wherein the security object data is one of 
textual data, audio data, graphical data, and biometric data. 

2? , (Original) The computer program product of claim IS, wherein the security object type is one of 

a single use security object* a group security object, a timed security object, a concurrent multi-user 

security object, a security object throttle, a translated password security object, a security object 

augmented by a at least one of a CPU identifier, a CPU speed and a system configxiration, a Wave file or 

MP3 security object, an image file security object, a security object augmented by a location of the wer, a 

security object augmented by a current window and/or pointer position, a security object augmented by an 
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IP address, a security object augmented by a acreen bajckground charaoteristio, a security object 
augmented by a personal identifjcation number and one of a speed of a card swipe and a number of times 
of a card swipe» a security object augmented by a mobile telephone ring or mobile telephone 
identification number, a security object augmented by a caller identification of the user, and a security 
object augmented by an environmental condition. 

24. (Previously presented) The computer program product of claim 1 8, fiirther comprising: 
fourth instmctions for providing the security object to a security system, wherein the security 

system is a hardware data processing system that stores the security object and associates the security 
object with a user identification so that the security object may be retrieved when the u^er enters their 
identification in order to gain access to the item, 

25. (Previously presented) The computer program product of claim 24, wherein the security system 
invokes the security object in response to a request for access to the item by the user. 

26. (Original) The conqjuter program product of claim 1 8, further comprising fourth instmctions for 
storing tiic security object data on an electronic medium in a device with data transmission capability. 

27. (Original) The computer program product of claim 1 8, further comprising fourth instn^^ 
storing the security object data in a portable device, 

28. (Original) The computer program prodwt of claim 27, wherein the portable device is one of a 
keychain> a portable MP3 player, a mobile telephone, a pager, an electronic wrist watch, a remote control, 
a garage door transmitter, a keyless entry device for a vehicle, a smartcard, and a magnetic stripe card. 

29. (Original) The computer program product of claim 24, wherein the security object contains a 
partial set of methods and wherein the security system contains a complementary set of methods. 

30. (Original) The computer program product of claim 18, wherein the security object requires 
hardware assistance for authentication of input data passed to the security object 

3 1 . (Original) Tlie computer program product of claim 1 8, wherein the security obj ect data is 
received from a client apparatus. 
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32. (Original) The c?on?>uter program product of claim 1 8, wherein the security object data is 
received from a user via a user interface. 

33. (Original) The computer program product of claim 32, wherein the user interface is a security 
object foundry application resident on a computing device. 

34. (Original) The computer program product of claim 32, wherein the user interface is an interface 
transmitted from a server apparatus to a client apparatus. 

35. (Previously presented) An apparatus for generating a security object for use in authenticating a 
user to access an item, comprising: 

means for receiving security object data; 

means for setting one or more attributes associated with the security object data, wherein the one 
or more attributes include a user desiguation of a security object type; and 

means for encapsulating, within the security object, the security object data and the one or more 
attributes with one or more methods, wherein the security object is used to authenticate the user by 
validating an identity of the user using at le^t one of the one or more methods encapsulated within the 
security object. 

36. (Original) The apparatus of claim 35, means for obtaining one or more methods fiiom a security 
object class. 

37. (Original) The apparatus of claim 35> wherein the one or more methods operate on the security 
object data and one or more attributes. 

38* (Previously presented) The apparatus of claim 35^ wherein the one or more methods operate on 
the security object data and input data provided by tlie user and passed to the security object to 
authenticate the user to access the item. 

39. (Original) The apparatus of claim 35, wherein the security object data is one of textual data, 
audio data, graphical data, and biometric data. 

40* (Original) The apparatus of claim 35, wherein the security object type is one of a single use 

security object, a gi^oup security object, a timed secxirity object, a concurrent multi-user security object, a 

security object throttle, a translated password secmity object, a security object augmented by a at least 
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one of a CPU identifier, a CPU speed and a system configuration, a Wave file or MP3 security object, an 
image file security objec?t, a security object augmented by a location of the user^ a security object 
augmented by a current window and/or pointer position, a security object augmented by an IP address, a 
security object augmented by a screen background characteristic, a security object augmented by o 
personal identification number and one of a speed of a card swipe and a number of times of a card swipe, 
a security object augmented by a mobile telephone ring or mobile telephone identification number, a 
aecurity object augmented by a caller identification of the U9er> and a security object augmented by an 
environmental condition. 

41 . (Previously presented) The apparatus of claim 3 5, further comprising : 

means for providing fbe security object to a security system, wherein the security system is a 
hardware data processing system that stores the security object and associates the security object with a 
user identification so that the security object may be retrieved when the user enters their identification m 
order to gain access to the item. 

42. (Previously presented) The apparatus of claim 41, wherein the security system invokes the 
security object in response to a request for access to the item by the user, 

43. (Original) The ^paratus of claim 18, further comprising means for storing the security object 
data on an electronic medium in a device with data transmission capability* 

44. (Original) The apparatus of claim 43, whei^in the device is a portable device. 

45. (Original) The apparatus of claim 44, wherein the portable device is one of a keychain, a portable 
MP3 player, a mobile telephone, a pager, an electronic wrist watch, a remote control, a garage door 
transmitter, a keyless entry device for a vehicle, a sxnartcard, and a magnetic stripe card. 

46. (Original) The apparatus of claim 41, wherein the security abject contains a partial set of 
methods and wherein the security system contains a complementary set of methods* 

47. (Original) The apparatus of claim 35, wherein the security object requires hardware assistance 
for authentication of input data passed to the security object. 

48. (Original) The apparatus of claim 35, wherein the security object data is received from a client 
appai-atus. 
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49. (Original) The apparatus of claim 3 5, wherein tiie security object data is received from a user via 
a user interface. 

50. (Original) The apparatus of claim 49, wherein the user interface is a security object foundry 
application resident on a computing device. 

51. (Original) The apparatus of claim 49, wherein the user interface Is an interface transmitted from a 
server appeuratus to a client apparatus. 

52. (Cancelled) 
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